Release TradingCodex 0.2.0

Author: monarchjuno

AGENTS.md

@@ -16,6 +16,10 @@ TradingCodex is a Python/Django local-first trading harness. CLI code lives in `
 
 Target Python `>=3.14,<3.15` and Django `5.2.x`. Use four-space indentation, clear module-level service functions, and type hints where they clarify contracts. Admin, Django Ninja, MCP, generated hooks, and CLI code should call shared application services rather than duplicating policy, approval, research, order, portfolio, audit, or harness logic. Research artifacts and source snapshots are workspace-file-native, not Django DB models. Prefer direct canonical imports over pre-release compatibility facades. Keep generated workspace template bodies as ordinary files under `workspace_templates/modules/*/files`; use Python for registry loading, dependency resolution, rendering, validation, and generated indexes, not to hide durable prompts, skills, policies, hooks, or workspace-contract content inside string constants.
 
+## Agent Context & Harness Review
+
+When changing or reviewing agent, workflow, MCP, policy, template, or harness behavior, do not infer behavior from Python code alone. Read the relevant harness flow and instruction surfaces first: `docs/harness.md`, `docs/roles-skills-and-workflows.md`, `tradingcodex_service/application/components.py`, and generated workspace files under `workspace_templates/modules/*/files`, especially `.agents/skills/*/SKILL.md`, `.codex/agents/*.toml`, `.codex/prompts/*`, `.codex/hooks/*`, `.tradingcodex/policies/*`, and `.tradingcodex/workflows/*`. Treat skill bodies, role TOML, hooks, policies, docs, and service-layer code as one product contract; keep them aligned when routing, permissions, role boundaries, quality gates, or workflow behavior changes.
+
 ## Testing Guidelines
 
 Use pytest; test files and functions should follow `test_*.py` and `test_*`. Run focused tests while iterating, then `python -m pytest` before handoff. Template or bootstrap changes must regenerate a clean workspace and run `./tcx doctor`. Research-memory changes should verify file-native create, search, source-snapshot, and export flows. MCP changes should verify `tools/list`.

README.md

@@ -60,7 +60,7 @@ execution-sensitive state lives in the central local runtime DB:
 
 ## What TradingCodex Does
 
-TradingCodex `0.1.0` provides:
+TradingCodex `0.2.0` provides:
 
 - A generated Codex workspace with fixed role topology, project-scoped MCP,
   local wrappers, workspace manifest, generated policy/config files, and
@@ -79,14 +79,20 @@ TradingCodex `0.1.0` provides:
   role boundaries.
 - Policy, restricted-symbol, approval, order, execution, portfolio, MCP, and
   audit services behind a shared Django application layer.
-- Experimental paper/stub order lifecycle support: validate intent, create
-  approval receipt, submit approved order, cancel approved order, and record
+- Broker Center foundations: broker connections, broker accounts, read-only
+  paper sync, external MCP broker discovery import, and reconciliation
+  summaries behind the service layer.
+- Canonical Order Ticket foundations: natural-language or structured draft
+  tickets, schema/policy/cash-position/broker validation checks, state-machine
+  events, exact approval-scope binding, broker order timeline, and paper fills.
+- Experimental paper/stub order lifecycle support: check order tickets, request
+  approval receipts, submit approved orders, cancel approved orders, and record
   outcomes.
 - A local product web surface for browsing agents, skills, research markdown,
-  external MCP router metadata, starter prompts, and operational state.
+  external MCP Gate metadata, starter prompts, and operational state.
 - Django Admin, Django Ninja API, CLI, and MCP surfaces that call the same
   service-layer logic instead of creating parallel execution paths.
-- A managed external MCP router gate that imports discovery metadata,
+- A managed External MCP Gate that imports discovery metadata,
   classifies tool risk, scopes role access, and blocks unsafe direct proxy
   paths by default.
 
@@ -161,9 +167,10 @@ http://127.0.0.1:48267/
 ```
 
 The dashboard is a review and control surface for the agent roster, required
-and optional skills, strategy skills, research markdown, external MCP router
-metadata, starter prompts, policy/order/portfolio/activity status, and local
-workspace state. It does not spawn Codex agents, approve orders, submit
+and optional skills, strategy skills, research markdown, Broker Center,
+External MCP Gate metadata, portfolio sync/reconciliation, order-ticket
+drafts/checks, starter prompts, policy/order/portfolio/activity status, and
+local workspace state. It does not spawn Codex agents, approve orders, submit
 executions, or provide investment recommendations.
 
 For CLI-only sessions, start it manually:
@@ -185,11 +192,11 @@ TradingCodex is designed around handoffs rather than one giant answer:
 3. Analysts create evidence-backed artifacts with source/as-of posture.
 4. Downstream roles consume accepted upstream artifacts instead of silently
    filling missing work outside their role.
-5. Portfolio and risk roles review fit, sizing, limits, restricted symbols,
-   and approval readiness.
-6. If an executable paper/stub action is requested, `risk-manager` creates the
-   approval receipt and `execution-operator` submits only through TradingCodex
-   MCP.
+5. Portfolio and risk roles review fit, sizing, broker sync/reconciliation,
+   limits, restricted symbols, order-ticket checks, and approval readiness.
+6. If an executable paper/stub action is requested, `risk-manager` creates an
+   approval receipt bound to the exact order payload hash and
+   `execution-operator` submits only through TradingCodex MCP.
 7. Policy decisions, MCP calls, approvals, execution results, and audit events
    remain inspectable through local service surfaces.
 
@@ -219,7 +226,7 @@ application services:
 
 | Surface | Role |
 | --- | --- |
-| Product web | Agents-first review dashboard for roles, skills, research markdown, external MCP router review, starter prompts, and local status. |
+| Product web | Agents-first review dashboard for roles, skills, research markdown, External MCP Gate lifecycle/review, starter prompts, and local status. |
 | Django Admin | Local/staff DB inspection for policy, orders, portfolio, MCP registry, workflows, integrations, and audit rows. |
 | Django Ninja API | Typed local/staff REST and control endpoints. |
 | MCP | Agent/tool boundary with typed tools, role scopes, policy checks, and audit. |
@@ -276,7 +283,7 @@ labels such as `research-only`, `screen-grade`, `not-decision-ready`, or
 
 ## Release Status
 
-`0.1.0` is the first stable public contract for the generated workspace, Python
+`0.2.0` is the OrderTicket rewrite release for the generated workspace, Python
 CLI, Django service plane, product web, MCP boundary, and documentation set.
 The package still uses an alpha development classifier because live broker
 adapters and hosted service modes are intentionally outside the initial core.

apps/integrations/admin.py

@@ -1,6 +1,6 @@
 from django.contrib import admin
 
-from apps.integrations.models import AdapterDefinition
+from apps.integrations.models import AdapterDefinition, BrokerAccount, BrokerConnection, InstrumentMap
 
 
-admin.site.register(AdapterDefinition)
+admin.site.register([AdapterDefinition, BrokerAccount, BrokerConnection, InstrumentMap])

apps/integrations/migrations/0002_brokerconnection_brokeraccount_instrumentmap.py

@@ -0,0 +1,85 @@
+# Generated by Django 5.2.5 on 2026-06-14 07:14
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('integrations', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='BrokerConnection',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('broker_id', models.CharField(max_length=120, unique=True)),
+                ('display_name', models.CharField(max_length=160)),
+                ('transport', models.CharField(default='paper', max_length=32)),
+                ('adapter_type', models.CharField(default='paper', max_length=64)),
+                ('status', models.CharField(default='read_only', max_length=32)),
+                ('credential_ref', models.CharField(blank=True, max_length=255)),
+                ('capabilities', models.JSONField(blank=True, default=list)),
+                ('enabled_read_scopes', models.JSONField(blank=True, default=list)),
+                ('enabled_trade_scopes', models.JSONField(blank=True, default=list)),
+                ('trust_level', models.CharField(default='unreviewed', max_length=32)),
+                ('last_sync_at', models.DateTimeField(blank=True, null=True)),
+                ('last_health_status', models.CharField(default='not_checked', max_length=32)),
+                ('drift_status', models.CharField(default='none', max_length=32)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+            ],
+            options={
+                'verbose_name': 'Broker connection',
+                'verbose_name_plural': 'Broker connections',
+                'ordering': ['display_name', 'broker_id'],
+            },
+        ),
+        migrations.CreateModel(
+            name='BrokerAccount',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('broker_account_id', models.CharField(max_length=160)),
+                ('account_label', models.CharField(blank=True, max_length=160)),
+                ('account_type', models.CharField(default='paper', max_length=64)),
+                ('base_currency', models.CharField(default='KRW', max_length=16)),
+                ('masked_identifier', models.CharField(blank=True, max_length=120)),
+                ('trading_enabled', models.BooleanField(default=False)),
+                ('discovered_at', models.DateTimeField(auto_now_add=True)),
+                ('last_seen_at', models.DateTimeField(blank=True, null=True)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+                ('broker_connection', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='accounts', to='integrations.brokerconnection')),
+            ],
+            options={
+                'verbose_name': 'Broker account',
+                'verbose_name_plural': 'Broker accounts',
+                'ordering': ['broker_connection__display_name', 'broker_account_id'],
+                'constraints': [models.UniqueConstraint(fields=('broker_connection', 'broker_account_id'), name='unique_broker_account_per_connection')],
+            },
+        ),
+        migrations.CreateModel(
+            name='InstrumentMap',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('canonical_symbol', models.CharField(max_length=64)),
+                ('broker_symbol', models.CharField(max_length=120)),
+                ('exchange', models.CharField(blank=True, max_length=64)),
+                ('asset_type', models.CharField(default='equity', max_length=64)),
+                ('currency', models.CharField(default='KRW', max_length=16)),
+                ('tick_size', models.DecimalField(blank=True, decimal_places=8, max_digits=20, null=True)),
+                ('lot_size', models.DecimalField(blank=True, decimal_places=8, max_digits=20, null=True)),
+                ('min_order_quantity', models.DecimalField(blank=True, decimal_places=8, max_digits=20, null=True)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+                ('broker_connection', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='instrument_maps', to='integrations.brokerconnection')),
+            ],
+            options={
+                'verbose_name': 'Instrument map',
+                'verbose_name_plural': 'Instrument maps',
+                'ordering': ['canonical_symbol', 'broker_symbol'],
+                'constraints': [models.UniqueConstraint(fields=('broker_connection', 'canonical_symbol', 'broker_symbol'), name='unique_instrument_map_per_broker')],
+            },
+        ),
+    ]

apps/integrations/models.py

@@ -14,3 +14,84 @@ class Meta:
 
     def __str__(self) -> str:
         return self.adapter_id
+
+
+class BrokerConnection(models.Model):
+    broker_id = models.CharField(max_length=120, unique=True)
+    display_name = models.CharField(max_length=160)
+    transport = models.CharField(max_length=32, default="paper")
+    adapter_type = models.CharField(max_length=64, default="paper")
+    status = models.CharField(max_length=32, default="read_only")
+    credential_ref = models.CharField(max_length=255, blank=True)
+    capabilities = models.JSONField(default=list, blank=True)
+    enabled_read_scopes = models.JSONField(default=list, blank=True)
+    enabled_trade_scopes = models.JSONField(default=list, blank=True)
+    trust_level = models.CharField(max_length=32, default="unreviewed")
+    last_sync_at = models.DateTimeField(null=True, blank=True)
+    last_health_status = models.CharField(max_length=32, default="not_checked")
+    drift_status = models.CharField(max_length=32, default="none")
+    metadata = models.JSONField(default=dict, blank=True)
+    created_at = models.DateTimeField(auto_now_add=True)
+    updated_at = models.DateTimeField(auto_now=True)
+
+    class Meta:
+        ordering = ["display_name", "broker_id"]
+        verbose_name = "Broker connection"
+        verbose_name_plural = "Broker connections"
+
+    def __str__(self) -> str:
+        return f"{self.display_name} ({self.status})"
+
+
+class BrokerAccount(models.Model):
+    broker_connection = models.ForeignKey(BrokerConnection, on_delete=models.CASCADE, related_name="accounts")
+    broker_account_id = models.CharField(max_length=160)
+    account_label = models.CharField(max_length=160, blank=True)
+    account_type = models.CharField(max_length=64, default="paper")
+    base_currency = models.CharField(max_length=16, default="KRW")
+    masked_identifier = models.CharField(max_length=120, blank=True)
+    trading_enabled = models.BooleanField(default=False)
+    discovered_at = models.DateTimeField(auto_now_add=True)
+    last_seen_at = models.DateTimeField(null=True, blank=True)
+    metadata = models.JSONField(default=dict, blank=True)
+
+    class Meta:
+        ordering = ["broker_connection__display_name", "broker_account_id"]
+        constraints = [
+            models.UniqueConstraint(
+                fields=["broker_connection", "broker_account_id"],
+                name="unique_broker_account_per_connection",
+            )
+        ]
+        verbose_name = "Broker account"
+        verbose_name_plural = "Broker accounts"
+
+    def __str__(self) -> str:
+        return self.account_label or self.broker_account_id
+
+
+class InstrumentMap(models.Model):
+    canonical_symbol = models.CharField(max_length=64)
+    broker_symbol = models.CharField(max_length=120)
+    broker_connection = models.ForeignKey(BrokerConnection, on_delete=models.CASCADE, related_name="instrument_maps")
+    exchange = models.CharField(max_length=64, blank=True)
+    asset_type = models.CharField(max_length=64, default="equity")
+    currency = models.CharField(max_length=16, default="KRW")
+    tick_size = models.DecimalField(max_digits=20, decimal_places=8, null=True, blank=True)
+    lot_size = models.DecimalField(max_digits=20, decimal_places=8, null=True, blank=True)
+    min_order_quantity = models.DecimalField(max_digits=20, decimal_places=8, null=True, blank=True)
+    metadata = models.JSONField(default=dict, blank=True)
+
+    class Meta:
+        ordering = ["canonical_symbol", "broker_symbol"]
+        constraints = [
+            models.UniqueConstraint(
+                fields=["broker_connection", "canonical_symbol", "broker_symbol"],
+                name="unique_instrument_map_per_broker",
+            )
+        ]
+        verbose_name = "Instrument map"
+        verbose_name_plural = "Instrument maps"
+
+    def __str__(self) -> str:
+        return f"{self.canonical_symbol} -> {self.broker_symbol}"